Описание
Security update for ed
This update for ed fixes the following security issues:
- CVE-2017-5357: An invalid free in the regular expression handling of the 'ed' command processing could allow local users to crash ed. (bsc#1019807)
Список пакетов
SUSE Linux Enterprise Server 11 SP4
ed-0.2-1001.30.3.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4
ed-0.2-1001.30.3.4
Ссылки
- Link for SUSE-SU-2019:14005-1
- E-Mail link for SUSE-SU-2019:14005-1
- SUSE Security Ratings
- SUSE Bug 1019807
- SUSE CVE CVE-2017-5357 page
Описание
regex.c in GNU ed before 1.14.1 allows attackers to cause a denial of service (crash) via a malformed command, which triggers an invalid free.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:ed-0.2-1001.30.3.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4:ed-0.2-1001.30.3.4
Ссылки
- CVE-2017-5357
- SUSE Bug 1019807
- SUSE Bug 1148899
- SUSE Bug 1196769